AWS Cloud Security

Cloudxtreme; Pune District, Bengaluru, New Delhi; On-site; INR 250,000 - 500,000; Full time

Job summary

Cloudxtreme is seeking an experienced AWS Cloud Security specialist to own governance, CSPM/CNAPP operations, and automation in a PAN India remit. You will design SCPs, implement guardrails, and integrate security tooling with CI/CD and log pipelines.

Candidate will focus on IAM, data protection, and risk prioritization while building scalable IaC and evidence reporting mechanisms for audits.

Qualifications

• AWS Organizational Governance: SCP design, multi-account patterns, delegated admin setups.
• Logging and audit foundations: CloudTrail, AWS Config aggregator, GuardDuty, Security Hub.
• CSPM/CNAPP operations: onboarding, tuning posture policies, log routing integration.
• Infrastructure as Code: Terraform modules, policy-as-code, CI scanning.
• Vulnerability & risk prioritization using CVSS and asset criticality.
• Automation & scripting: Python (boto3), AWS CLI, evidence export and reporting.
• Identity & access: IAM least privilege, cross-account roles, automation.
• Observability: Cribl/Firehose/Kinesis-like pipelines.
• Compliance: HIPAA safeguard themes (auditability, access control).
• Metrics & reporting: KPI design and extraction.

Skills

Terraform CNAPP onboarding

Python boto3

AWS security services

IAM policy JSON

CNAPP tooling Wiz

AWS Config

Framework rule deployment

Cribl / log pipelines

CI/CD pipelines

Job description

Job Title:

AWS Cloud Security

Locations:

PAN India

Experience Range:

4 to 13 years

Required Skills:

• Terraform Advanced CNAPP onboarding, scanning pipeline
• Python (boto3) Advanced Validation & evidence automation
• AWS Security Services Deep Guardrails + findings pipeline
• SCP / IAM Policy JSON Deep Precise preventive controls
• CNAPP tooling Advanced Wiz configuration
• AWS Config / Conformance
• Packs Advanced Framework rule deployment
• Event & Log Pipelines Intermediate Cribl
• CI/CD (GitHub Actions, Azure DevOps, or similar) Intermediate Shift-left scanning & gating

Job Description:

Domain Expertise

1. AWS Organizational Governance: Service Control Policies (SCP) design, multi-account patterns, delegated admin setups.

2. Logging & Audit Foundations: Org CloudTrail, AWS Config aggregator, S3 log archive hardening, GuardDuty, Security Hub.

3. CSPM / CNAPP Operations(Wiz.io): Onboarding accounts/resources, tuning posture policies, integrating with ticketing and log routing (e.g., Cribl/SIEM).

4. Infrastructure as Code: Terraform modules, reusable patterns, policy-as-code integration, CI scanning.

5. Vulnerability & Risk Prioritization: Combining CVSS, exploit context, asset criticality, and signal sources into severity logic.

6. Automation & Scripting: Python (boto3), AWS CLI, shell tooling for validation, evidence export, reporting.

7. Identity & Access: IAM least privilege, cross-account role assumptions, permission boundaries, automation roles.

8. Observability / Data Routing (Plus): Cribl / Firehose / Kinesis or equivalent pipeline familiarity.

9. Compliance Awareness: HIPAA safeguard themes (auditability, access control, data protection, etc).

10. Metrics & Reporting: Designing & extracting KPIs (coverage %, MTTR, SLA compliance, control efficacy).

Technical Skills

• Terraform Advanced CNAPP onboarding, scanning pipeline
• Python (boto3) Advanced Validation & evidence automation
• AWS Security Services Deep Guardrails + findings pipeline
• SCP / IAM Policy JSON Deep Precise preventive controls
• CNAPP tooling Advanced Wiz configuration
• AWS Config / Conformance
• Packs Advanced Framework rule deployment
• Event & Log Pipelines Intermediate Cribl
• CI/CD (GitHub Actions, Azure DevOps, or similar) Intermediate Shift-left scanning & gating